vsmon.exe
TrueVector Service by Check Point Software Technologies Ltd. (Signed)
Overview
vsmon.exe has 2 known versions, the most recent one is 13.2.15.0. It is started as a Windows Service called 'TrueVector Internet Monitor' with the name 'vsmon' and described as “Monitors internet traffic and generates alerts for disallowed access.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 3.43 MB. It is an authenticode code-signed executable issued to Check Point Software Technologies Ltd. by the certification authority VeriSign. The programs ZoneAlarm Free Firewall, ZoneAlarm Free Antivirus + Firewall and ZoneAlarm Pro have been observed as installing specific variations of vsmon.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0012% including both foreground and background operations, the average private memory consumption is about 200.15 MB with the maximum memory reaching around 235.3 MB.
Details |
File name: | vsmon.exe |
Publisher: | Check Point Software Technologies Ltd. |
Product name: | TrueVector Service |
Typical file path: | C:\Program Files\checkpoint\zonealarm\vsmon.exe |
Certificate |
Issued to: | Check Point Software Technologies Ltd. |
Authority (CA): | VeriSign |
Effective date: | Sunday, May 11, 2014 |
Expiration date: | Monday, July 10, 2017 |
Windows Service |
Service name: | vsmon |
Display name: | TrueVector Internet Monitor |
Description: | “Monitors internet traffic and generates alerts for disallowed access.” |
Type: | Win32OwnProcess |
Programs installed in
(Note, the programs listed below are for all versions of TrueVector Service.)
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free software firewall to help them protect their PC -- created by one of the world's leading secu...
“The only free Antivirus that also includes a Firewall. Protect yourself with the ultimate free Internet security solution. The all-in-one security solution that seamlessly integrates antivirus and fir...”
“Monitors programs for suspicious behavior spotting and stopping new attacks that bypass traditional anti-virus protection. Locks out hackers, blocks intrusions and makes your PC invisible online. No p...”
“Detects and removes viruses, spyware, Trojan horses, worms, bots and more. Independently tested to provide superior protection. Restricts programs from malicious activities – blocking attacks that byp...”
“ZoneAlarm Extreme Security is a comprehensive security suite protects your PC, identity, data and everything you do online. Further protection comes with anti-phishing, anti-spam, parental controls an...”
“Stops Internet attacks at the front door and even catches thieves on their way out. Our two-way firewall software proactively protects against inbound and outbound attacks while making you invisible t...”
Behaviors
(Note, the behaviors below are for all versions of vsmon.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- 'vsmon' (TrueVector Internet Monitor)
All file variations of vsmon.exe